Revision as of 07:50, 25 August 2010

Can't make the date? If you come to this page before or after the test day is completed, your testing is still valuable, and you can use the information on this page to test, file any bugs you find at Bugzilla, and add your results to the results section. If this page is more than a month old when you arrive here, please check the current schedule - which should be linked at QA/Test_Days - and see if a similar but more recent Test Day is planned or has already happened.

Contents

What to test?

Page not ready yetThis page is still being worked on. The instructions here are not final yet and they will probably change substantially soon.

Have you ever used any security scanning application? Does the security configuration of your box matters? Do you want to keep you system in consistent state? If you have positive answer to any of these questions then it's probably worth to joint this Fedora Test Day that will focus on OpenSCAP feature.

What is SCAP? It is a line of standards managed by NIST. It was created to provide a standardized approach to maintaining the security of systems, such as automatically verifying the presence of patches, checking system security configuration settings, and examining systems for signs of compromise.

The SCAP suite contains multiple complex data exchange formats that are to be used to transmit important vulnerability, configuration, and other security data. Historically, there have been few tools that provide a way to query this data in the needed format. This lack of tools makes the barrier to entry very high and discourages adoption of these protocols by the community. It's a goal of OpenSCAPproject to create a framework of libraries to improve the accessibility of SCAP and enhance the usability of the information it represents.

Who's available

The following cast of characters will be available testing, workarounds, bug fixes, and general discussion:

Prerequisite for Test Day

A fully updated Fedora 13 or 14.

This must be a real installation, live CDs are unfortunately not suitable for this test day.

We are interested in different software setups, so if possible please use your real workstation, rather than clean install of F13 or F14. You don't have to be afraid, this software is not destructive in any way.

How to test?

Get the most recent SCAP content from our GIT (i.e. look for scap-fedora14-oval.xml and scap-fedora14-xccdf.xml for Fedora 14/13/12). <<FIXME - ambiguous whether to download scap-fedora14-*.xml even for Fedora 13? And why Fedora 12 when it is even not supported in our Prerequisites?>>

Follow the test cases below.

Write your results to the result matrix.

Test Cases

Test Results

If you have problems with any of the tests, report a bug to Bugzilla for the openscap component. If you are unsure about exactly how to file the report or what other information to include, just ask on IRC and we will help you. Once you have completed the tests, add your results to the Results table below, following the example results from the first line as a template.

Red Hat, Red Hat Enterprise Linux, the Shadowman logo, and JBoss are trademarks or registered trademarks of
Red Hat, Inc. or its subsidiaries in the United States and other countries.
Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries.
The Fedora Project is maintained and driven by the community and sponsored by Red Hat. This is a community
maintained site. Red Hat is not responsible for content.